CVE-2026-53123

Source
https://cve.org/CVERecord?id=CVE-2026-53123
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53123.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-53123
Downstream
Published
2026-06-24T16:30:52.609Z
Modified
2026-06-25T04:05:21.051276962Z
Summary
md: wake raid456 reshape waiters before suspend
Details

In the Linux kernel, the following vulnerability has been resolved:

md: wake raid456 reshape waiters before suspend

During raid456 reshape, direct IO across the reshape position can sleep in raid5makerequest() waiting for reshape progress while still holding an activeio reference. If userspace then freezes reshape and writes md/suspendlo or md/suspendhi, mddevsuspend() kills active_io and waits for all in-flight IO to drain.

This can deadlock: the IO needs reshape progress to continue, but the reshape thread is already frozen, so the active_io reference is never dropped and suspend never completes.

raid5preparesuspend() already wakes waitforreshape for dm-raid. Do the same for normal md suspend when reshape is already interrupted, so waiting raid456 IO can abort, drop its reference, and let suspend finish.

The mdadm test tests/25raid456-reshape-deadlock reproduces the hang.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53123.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
714d20150ed85811193ae07a494d91f9927c590f
Fixed
8b6a72420821e6da2cab6a69d5233500d2698b93
Fixed
ff6b93410192b812d73cc54062529715b2dc849f
Fixed
8ae3e14d7f3df58f7f49c02d74344e3dcd5f84f0
Fixed
cf86bb53b9c92354904a328e947a05ffbfdd1840

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53123.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.91
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.33
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.10

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53123.json"